This Privacy Policy explains how THEME SEVA ("we", "us", "our") collects, uses, shares, and protects information when you use SafePayUPI (the "Service"). It applies to merchants who register for an account and to visitors of our website.
SafePayUPI generates UPI QR codes, links, and pages against a UPI ID you provide. We do not process or hold your funds, and we do not collect the banking credentials (UPI PIN, card numbers, net-banking passwords) used to complete a payment — those stay between you, your payer, and your bank or UPI app.
| Category | Examples |
|---|---|
| Account information | Name, mobile number, email, password (stored as a hash) |
| Business information | Business name, UPI ID, address, GSTIN (if provided) |
| KYC documents | PAN, business registration proof, identity/address proof submitted for verification |
| Transaction metadata | QR/link creation time, amount requested, status, reference IDs — not your payer's banking credentials |
| Support communications | Messages sent via our contact form, email, or WhatsApp support |
| Technical data | IP address, browser type, device information, pages visited |
Where the Service requires KYC verification, documents you submit are used solely to verify your identity and eligibility to use payment-related features, and to meet our obligations under applicable law. We retain KYC documents for as long as your account is active and for the period required by law after closure.
We retain account and transaction metadata for as long as your account is active and for a reasonable period afterward to meet legal, accounting, and fraud-prevention obligations. KYC records are retained as required under applicable regulation. You can request deletion of information we're not legally required to keep — see Section 9.
We use technical and organizational measures — including password hashing, access controls, and encrypted connections — to protect your information. No method of transmission or storage is completely secure, and we cannot guarantee absolute security.
Subject to applicable law (including India's Digital Personal Data Protection Act, 2023), you may have the right to:
To exercise these rights, contact us using the details in Section 13.
The Service is intended for merchants aged 18 and over. We do not knowingly collect information from anyone under 18. If you believe a minor has provided us information, contact us and we will take steps to remove it.
Our infrastructure and service providers may process information outside your home country. Where this occurs, we take steps to ensure information continues to receive an appropriate level of protection consistent with this policy and applicable law.
We may update this Privacy Policy from time to time. Material changes will be notified through the dashboard or by email before they take effect. The "Last updated" date at the top reflects the most recent revision.
In accordance with Indian IT Rules, questions, complaints, or requests relating to this policy can be directed to our Grievance Officer:
We aim to acknowledge complaints within a reasonable time and resolve them as required by applicable law.